Hi Terry, on Thu, 1 Apr 2004 11:52:29 -0800GMT, you wrote:
TGM> Is there anyway to figure out what the smtp address is of mail TGM> received. What do you mean? The first SMTP address used? Hit <F9> to see all headers of the mail. Here is what I got from your mail that I'm replying to: ... Delivery-date: Thu, 01 Apr 2004 21:54:00 +0200 Received: from [62.80.28.25] (helo=server01.clinservices.de) by mxng08.kundenserver.de with esmtp (Exim 3.35 #1) id 1B98GG-0000ma-00 for [EMAIL PROTECTED]; Thu, 01 Apr 2004 21:54:00 +0200 Received: from draenor.its-toasted.org (draenor.its-toasted.org [62.80.28.8]) by server01.clinservices.de (Postfix) with ESMTP id D9D52274397; Thu, 1 Apr 2004 21:53:19 +0200 (CEST) Received: from smtp813.mail.sc5.yahoo.com ([66.163.170.83]) by draenor.its-toasted.org with smtp (Exim 4.30) id 1B98F0-0001tb-VF for [EMAIL PROTECTED]; Thu, 01 Apr 2004 21:52:43 +0200 Received: from unknown (HELO ?192.168.21.230?) ([EMAIL PROTECTED]@12.146.26.117 with plain) by smtp813.mail.sc5.yahoo.com with SMTP; 1 Apr 2004 19:52:33 -0000 ... So this last entry is probably the server the sender has used. But you can't rely on that, as these headers can be faked... If you really need to find out a mail's origin you might get help at http://www.spamcop.net/ -- Cheers Peter Just that you're paranoid doesn't mean they are NOT after you. Winamp currently playing: Beatles - She Said, She Said ________________________________________________ Current version is 2.04.7 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html